Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/faa68aee358a9f98e02ae480ea8fdcf37e30b98f.roa
File:                     faa68aee358a9f98e02ae480ea8fdcf37e30b98f.roa (raw, json)
Hash identifier:          SLPBYxvP7snF0BMeQUGORnwp9PAl12+rNZpnFSWYbO4=
Subject key identifier:   FC:96:01:D8:43:C4:FB:7C:01:2B:55:79:43:5B:69:37:79:02:7E:51
Certificate issuer:       /CN=4b7263ae996022ab55e14b7db69a858557a1bac5
Certificate serial:       0F5FA3
Authority key identifier: 95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/faa68aee358a9f98e02ae480ea8fdcf37e30b98f.roa
Signing time:             Thu 23 Feb 2023 15:56:35 +0000
ROA not before:           Wed 22 Feb 2023 15:45:21 +0000
ROA not after:            Sun 23 Feb 2025 15:45:21 +0000
asID:                     271927
IP address blocks:        2803:ea10:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1007523 (0xf5fa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7263ae996022ab55e14b7db69a858557a1bac5
        Validity
            Not Before: Feb 22 15:45:21 2023 GMT
            Not After : Feb 23 15:45:21 2025 GMT
        Subject: CN=faa68aee358a9f98e02ae480ea8fdcf37e30b98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:b1:97:db:b9:0a:73:74:36:44:88:28:58:
                    a2:94:fa:03:d7:7b:11:af:dc:ad:c1:8e:1b:18:7b:
                    c8:3d:66:a5:7e:ca:82:10:b5:e0:57:8c:82:94:7a:
                    85:3f:f1:b4:48:ab:c7:b7:f5:d4:76:51:41:27:7f:
                    e0:67:51:01:69:ff:e8:69:0f:48:92:08:be:96:a9:
                    fe:7d:a2:2d:bc:ff:8d:dc:35:bb:8a:8d:cb:a1:6e:
                    5e:9a:78:c8:50:67:61:cb:d1:7b:55:c0:66:ae:3c:
                    21:10:9d:b2:90:87:3b:b0:a9:d8:62:2e:c9:81:06:
                    0c:3a:3b:51:9b:3b:02:37:f5:e1:01:f3:6b:16:2a:
                    60:39:d1:41:36:4d:27:87:1c:c4:b7:3c:04:29:09:
                    88:a4:d5:2f:d2:45:05:50:04:23:3b:c7:4a:f9:b2:
                    ef:32:de:c5:86:b8:bc:54:76:a5:c9:29:28:d1:f9:
                    1a:b4:e4:95:9d:e0:c7:45:92:bd:49:c9:55:54:f6:
                    29:3a:ff:42:72:a6:54:a3:dd:9c:9c:95:90:f4:7f:
                    51:12:96:62:02:c5:76:05:29:b1:7b:cd:4a:27:45:
                    04:cb:aa:1a:94:83:9d:7d:5e:db:72:f4:a0:e6:03:
                    2f:20:e9:b7:5c:b9:89:be:ea:7b:db:8d:fb:82:80:
                    60:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:96:01:D8:43:C4:FB:7C:01:2B:55:79:43:5B:69:37:79:02:7E:51
            X509v3 Authority Key Identifier:
                keyid:95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/faa68aee358a9f98e02ae480ea8fdcf37e30b98f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/4b7263ae996022ab55e14b7db69a858557a1bac5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:45:94:c9:ae:3e:73:b5:fa:6f:20:b7:90:0c:a6:05:7e:6f:
         1a:a9:fc:a2:df:94:ca:89:ec:17:21:43:88:10:ed:a0:5c:d1:
         ca:29:ba:0e:09:73:46:fd:4c:43:98:75:9f:8f:a1:42:18:27:
         25:dc:22:fb:95:2b:ed:66:b9:f7:f7:a6:41:41:7d:17:63:6d:
         7f:ae:ed:6f:a2:73:8f:d2:b0:b7:06:ee:df:4d:95:5c:24:3c:
         ea:87:fb:1b:79:52:57:e8:61:58:cc:dc:cf:14:ce:74:5b:ef:
         60:41:96:91:1e:53:4a:8f:98:d0:63:b7:42:65:66:ec:1d:d1:
         d4:86:07:52:c0:3d:5c:33:77:70:dc:14:d0:f8:d8:43:ae:eb:
         4c:be:a0:85:da:db:03:9d:7f:f2:0d:cb:ee:e4:7b:a2:f3:81:
         de:79:71:2f:10:a6:45:a9:36:3f:4f:77:ec:21:55:74:8e:08:
         83:f3:9b:1c:61:d3:c1:6d:b7:20:f5:ba:33:d7:b9:20:99:67:
         e3:1c:4c:30:dc:2d:be:bf:f0:36:d1:b7:67:a6:19:61:31:f0:
         eb:4f:19:56:cc:14:d0:14:99:f4:49:17:e9:c8:88:c1:55:9f:
         7e:10:2b:0c:18:85:c2:96:8e:f6:87:d0:36:b7:ce:f6:b8:16:
         de:df:3d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----